Lines Matching defs:nonce
71 } nonce;
72 unsigned int nonce_size; /* nonce bytes filled so far */
501 memcpy(&dctx->nonce.bytes[dctx->nonce_size], p, n);
573 * The VMAC specification requires a nonce at least 1 bit shorter than
575 * nonce. We define the unused bit to be the first one and require that
578 if (dctx->nonce.bytes[0] & 0x80)
584 /* Generate pseudorandom pad by encrypting the nonce */
586 index = dctx->nonce.bytes[VMAC_NONCEBYTES - 1] & 1;
587 dctx->nonce.bytes[VMAC_NONCEBYTES - 1] &= ~1;
588 crypto_cipher_encrypt_one(tctx->cipher, dctx->nonce.bytes,
589 dctx->nonce.bytes);
590 pad = be64_to_cpu(dctx->nonce.pads[index]);